Privacy Policy

This Privacy Policy outlines our practices regarding the collection, use, and disclosure of personal information when you use our website and services.

Last updated: January 31, 2025

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or use dreambase.ai (the "Site") or the Dreambase service (collectively, the "Service") provided by Dream, Inc. DBA of Aliases, Inc. ("Company", "we", "our", or "us").

1. Information We Collect

1.1 Personal Information:

We may collect personal information that you provide directly to us, such as your name, email address, and any other information you choose to provide.

1.2 Usage Data:

We may collect information on how the Service is accessed and used. This may include your computer's Internet Protocol address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other diagnostic data.

1.3 User Content:

When you use our Service to generate AI-based content, we collect the content you provide (such as text prompts or uploaded files) and any associated metadata. By using our Service, you agree to the storage and processing of your content for the purpose of generating AI-based outputs.

1.4 Chat Data:

If you choose to use our optional chat-saving feature, we will store the content of your chats. This may include any information you provide during these conversations. We do not train any model with any of this data.

2. Use of Information

2.1 We use the information we collect for various purposes:

  • To provide and maintain our Service
  • To notify you about changes to our Service
  • To provide customer support
  • To gather analysis or valuable information so that we can improve our Service
  • To monitor the usage of our Service
  • To detect, prevent and address technical issues

2.2 We do not use Google Workspace API data for any purpose other than providing the Dream service as described in this policy.

3. Data Sharing and Disclosure

3.1 Service Providers:

We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

3.2 AI Model Providers:

When you use our Service to interact with AI models, your inputs are sent directly to the AI model provider you select (such as Anthropic, OpenAI, Google, Mistral, or Meta). We do not save these inputs or the resulting outputs. The use of your data by these providers is governed by their respective privacy policies.

3.3 Google Workspace API Data:

We do not use Google Workspace API data to train or improve our own AI models.

3.4 Legal Requirements:

We may disclose your Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of Aliases, Inc.
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of users of the Service or the public
  • Protect against legal liability.

3.5 Third-party Servers and AI Models:

Your content is stored on various servers to facilitate the AI generation process. We make no representations about the security or privacy practices of these third-party servers and AI models.

3.6 AI-Specific Processing:

We process data through AI systems to:

  • Generate content via specialized agents (coding, design, quality)
  • Analyze usage patterns via scanning/validation agents
  • Personalize outputs via context-aware orchestration.

4. Data Retention Policy

4.1 Retention Periods:

  • Active user and workspace data: Retained while account is active.
  • Inactive accounts: Archived after 24 months of inactivity.
  • Archived accounts: Deleted after 36 months of inactivity.

4.2 Deletion Process:

  • Manual file deletion: users can manually delete stored files and artifacts.
  • Account deletion requests: Processed within 30 days.

5. Data Security

We strive to use commercially acceptable means to protect your Personal Data, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure.

5.1 Vercel Hosting Protections:

  • Automatic HTTPS: All deployments use TLS 1.3 with auto-renewing certificates.
  • DDoS Protection: Enterprise-grade mitigation handling 1B+ weekly attacks.

5.2 Supabase Database Security:

  • Encryption: All data is encrypted at rest with AES-256 and in motion with TLS 1.3.

6. Your Data Protection Rights

Depending on your location, you may have certain data protection rights. These may include the right to access, update, or to delete the information we have on you. However, we cannot guarantee the deletion of your data upon request.

7. Children's Privacy

Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

9. Policies for Public Authority Requests

Your personal data and privacy are important to us. We will respond to requests from public authorities, including to meet national security or law enforcement requirements, in accordance with applicable data protection laws.

10. Disclaimer

While we strive to protect your information and privacy, you acknowledge that you use our Service at your own risk.

11. Enhanced Analytics & Telemetry

11.1 We collect (but not limited to):

  • Usage patterns for service optimization
  • Performance metrics for infrastructure scaling
  • Error reports for system stability

11.3 Third-party analytics tools:

  • Vercel Analytics
  • Supabase Reports & Logs
  • Google Analytics

11.4 Opt-out: Analytics collection is mandatory for service operation and cannot be disabled.

12. Contact

If you have any questions about this Privacy Policy, please contact us at support@dreambase.ai.